Software Security Architect
Core
Architect and lead secure software development lifecycle (SDLC) by integrating security tools and practices into the development environment, build, and artifact management pipelines.
Role type
Senior Software Security Architect
Builds
Secure CI/CD pipelines, artifact repositories (JFrog/SonaType), and automated security scanning (SAST/DAST/SCA) integrated into developer workflows.
Domain
Software Engineering / Information Security / DevOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Software development in C/C++ and Python, Configuration Management/DevOps, Software Composition Analysis (SCA), Vulnerability Management, CI/CD pipeline integration, Attack Surface Management
Preferred skills
Penetration testing, Secure Software Development Lifecycle (SSDLC) strategy, Cloud Security
Technologies
Jenkins, GitHub Actions, CircleCI, JFrog, Sonatype, Blackduck, Fortify, SonarQube, Perforce, GitHub
Responsibilities
Integrate security practices and solutions into the SDLC, Build and perform software composition analysis in CI/CD pipelines, Build Cadence artifactory using JFrog or SonaType, DevOps integration with tools like Jenkins and GitHub Actions, Prioritize and remediate software vulnerabilities
Seniority
Senior, hands-on IC
